The flaw is a CRLF Injection vulnerability (CWE-93) in Openfind MailAudit and MailGates that allows unauthenticated remote attackers to inject carriage return and line feed characters into input, causing the server to interpret them as header delimiters and enabling the reading of arbitrary system files the server can access.

Affected editions of Openfind MailAudit and MailGates are versions 6.0 through 6.1.10.054 and 5.0 through 5.2.10.099; the vendor recommends upgrading to 6.1.10.054 or later on the 6.x line, or to 5.2.10.099 or later on the 5.x line.

Based on the description, the attack appears to hinge on sending crafted HTTP requests that embed CRLF sequences in user input. The flaw scores 8.7 on CVSS, indicating high severity, but EPSS data is unavailable and the issue is not listed in CISA’s KEV catalog. The ability to read system files can expose configuration, credentials or other privileged data, potentially allowing an attacker to elevate privileges or launch further attacks. Prompt patching is essential.